Download the Latest Android Software - with an App?

May 02, 2017

An app giving users access to the latest Android software releases on Google Play? Sounds like good news, especially to those that have older versions of Android. However, users that download the app will not receive the latest update, but they will install spyware called SMSVova which is designed to send the user's location to attackers instead.

Despite the promising looking app, there were several red flags. The screen shots provided were blank - which is uncommon. Also, there is no proper description provided for it, nor does it mention it will send location information to a third party. Many reviewers complained the app slowed down their phone without providing the promised update.

When users try to start the app, it quits abruptly while displaying the message: "Unfortunately, Update Service has stopped." The app then hides from the main screen, but it hasn't actually stopped working.

The spyware sets up an Android service, which allows the app's processing to be done in the background, and a broadcast receiver, which responds to an intent and executes it, to fetch the last known location of the user and scan for incoming SMS messages for a certain message from the attacker. These messages contain more than 23 characters and have "vova-" in the body, and the spyware scans for a message including "get faq". This request allows the attacker to run simple commands, including the ability to protect the spyware with a password. Another feature the attacker could set up is to send the current location of the user if their battery is running low. The specific purpose behind the spyware is unknown, but the information gathered could be used for any number of malicious reasons.

Google has since removed the app, but not without 1 million to 5 million downloads since 2014. Users should realize that software updates will not come through an app. If your phone is compatible with a recent software release, Android will give you the option to update manually.

Those that have installed the system Update app should consider wiping their phones and starting fresh.